If you're having trouble at any stage please contact us at support@skyformation.com. 

Preface

The goal of this guide is to add a new SkyFormation for Sophos connector to your SkyFormation Platform.

Prerequisites

- Configure your Sophos Central to allow the SkyFormation connector integration

- API Access URL

  Your Sophos Central URL value created at the previous step

- Headers

  The API token Headers value created at the previous step

Firewall/Network connections needed for SkyFormation application

- Open the following services to be approachable from the SkyFormation machine:

   https://*.sophos.com

On-board SkyFormation for Sophos Central steps

1. Logon to your SkyFormation Platform:

2. Navigate via left navigation panel to "Settings" section

3. Navigate via New Settings left navigation panel to "Accounts" section

4. Click the "Add Account" bottom

5. At the "SELECT SERVICE TO ADD" choose "Sophos Central" 

You will see the below screen:

5. Fill in the following information:

    - Account Name
        Give the Sophos account a meaningful name for you. This will become your cloud app
        connector name displayed in the application and the events sent to external
        systems as SIEM/Log management.

      e.g. "Corporate Sophos"     

    - Description
      Add a text that describes the Sophos service account for you.

      e.g. "An admin service to manage the Corp Sophos suite"

    -  API Access URL

        The API access URL as copied at the prerequisite steps.

      e.g. https://api5.central.sophos.com

  -    API token

        The API token copied at the prerequisites step 1

        e.g. W17FnTeyRWUasdTGBdVeB+A3kASDaYUH0lre+MzuxRT=

 6.  Press DONE

 7. Make sure the status of the new Sophos Central connector is OK and green.

DONE